
$ rpki-client -vvf rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.mft
File: 5EC020FF41231134DE16F43F92714D434626A05B.mft (raw, json)
Hash identifier: n5BV8DkDyvWB1LxxIg7gKt4wtlnNzza3JJ/nNaX2X+Q=
Subject key identifier: 78:90:5C:BF:3F:13:02:EF:19:02:45:03:B9:8B:7E:25:CF:61:1A:62
Authority key identifier: 5E:C0:20:FF:41:23:11:34:DE:16:F4:3F:92:71:4D:43:46:26:A0:5B
Certificate issuer: /CN=5EC020FF41231134DE16F43F92714D434626A05B
Certificate serial: 2D8B51F36A0E072680F91473C57467997E5C3110
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5EC020FF41231134DE16F43F92714D434626A05B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.mft
Manifest number: 13
Signing time: Fri 15 May 2026 14:02:24 +0000
Manifest this update: Fri 15 May 2026 13:57:24 +0000
Manifest next update: Sat 16 May 2026 17:16:24 +0000
Files and hashes: 1: 323030313a6466303a373434303a3a2f34382d3438203d3e20313331313132.roa (hash: mxf66wCv3huHr7+y00gKhj0SFSiQHrPhglnN0dDJ4UY=)
2: 3130332e362e3231342e302f32342d3234203d3e20313331313132.roa (hash: 7EVkvK54oj3Ks8SpMiOp0AT2jMsnJWuUCj85YBui5p0=)
3: 5EC020FF41231134DE16F43F92714D434626A05B.crl (hash: pN2jvamzZVe/voKdFMxvZnzukA45hrCbgRWF29YO1GM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.crl
rsync://rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5EC020FF41231134DE16F43F92714D434626A05B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 16 May 2026 17:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:8b:51:f3:6a:0e:07:26:80:f9:14:73:c5:74:67:99:7e:5c:31:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5EC020FF41231134DE16F43F92714D434626A05B
Validity
Not Before: May 15 13:57:24 2026 GMT
Not After : May 16 17:16:24 2026 GMT
Subject: CN=78905CBF3F1302EF19024503B98B7E25CF611A62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:9d:ad:f2:79:59:82:9b:62:28:f1:88:05:
70:15:0c:03:45:3a:e6:ee:4d:22:0e:5a:ac:be:52:
35:4e:6e:fc:d8:2f:a5:56:34:4e:30:8c:f6:a1:15:
62:09:06:cf:38:eb:7c:5f:4a:39:28:6e:71:8e:28:
90:c5:68:fb:e1:21:50:c6:8d:21:38:cc:ce:49:0e:
32:03:9c:1e:e0:d2:ce:4c:c0:9d:f7:64:df:2e:69:
9f:51:d6:c7:f2:40:32:b3:b5:c1:fd:1d:aa:9b:56:
88:d9:23:c2:62:8f:d9:e5:a3:43:a4:95:f6:64:e7:
b5:5a:f9:7c:b3:71:bc:5c:e0:a7:9a:3c:57:92:15:
d4:5b:44:63:dd:3a:15:4f:33:c3:a3:fb:43:20:f2:
2c:5e:d3:66:34:6e:3d:cf:ce:43:bf:a6:42:94:ac:
17:b3:5d:48:95:b3:c8:12:45:98:69:d2:a0:d3:0a:
a7:56:d7:a2:c9:c4:92:35:c5:5e:0e:ea:77:a4:93:
46:91:b4:ce:95:37:48:42:e9:d7:96:0d:38:cc:f9:
20:3d:e5:9d:df:ea:97:42:ae:26:e3:e2:ad:a3:2d:
aa:c3:e7:2c:ae:02:90:f4:1f:4d:2f:8c:af:af:53:
43:45:c0:8d:0b:fd:f1:94:81:be:c8:8f:11:1b:61:
fb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:90:5C:BF:3F:13:02:EF:19:02:45:03:B9:8B:7E:25:CF:61:1A:62
X509v3 Authority Key Identifier:
keyid:5E:C0:20:FF:41:23:11:34:DE:16:F4:3F:92:71:4D:43:46:26:A0:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5EC020FF41231134DE16F43F92714D434626A05B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e6:1f:0f:1e:7a:37:83:34:d1:9e:03:9a:86:c5:2d:9c:36:
f5:05:0f:9e:64:6b:22:6d:09:f0:d2:b5:4b:1e:e6:7c:e7:ef:
36:9c:d1:4c:39:ad:c6:db:24:d9:67:76:cd:3d:d7:07:39:83:
a9:4f:09:d1:00:62:d4:29:bf:c4:cb:05:d7:ec:07:9a:9f:77:
01:fa:34:85:9b:1c:bc:a9:25:de:a4:f6:bb:0e:db:e4:40:87:
55:4f:9d:99:07:b1:31:0f:34:55:7c:ab:18:47:50:82:a3:25:
7f:a8:1c:74:6a:df:40:e2:bb:2a:9b:7f:4f:ec:cb:38:ad:b6:
3b:66:d8:70:24:b8:02:a1:10:37:ca:00:2f:74:e8:d9:61:2e:
40:dd:69:17:19:a1:6a:fb:ac:fa:c7:91:de:92:6a:94:8b:37:
3e:5a:d9:2f:98:eb:77:1d:fe:05:51:71:9a:48:5a:12:c7:df:
8a:a6:36:15:54:c8:c9:f9:d7:a2:08:54:6b:d1:09:12:50:6b:
47:bf:48:6d:62:dd:f9:87:c2:b7:40:10:47:4d:66:1e:63:31:
e2:31:12:37:bb:0b:e1:db:da:07:61:a2:b0:00:78:1d:2c:89:
05:40:3a:17:ac:e6:cd:84:d9:2c:f9:c7:84:b2:06:a9:b9:74:
d2:87:ac:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 11:04:51 2026 by rpki-client